NetBSD Problem Report #46510

From dholland@netbsd.org  Thu May 31 23:49:06 2012
Return-Path: <dholland@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66])
	by www.NetBSD.org (Postfix) with ESMTP id DBA5C63B882
	for <gnats-bugs@gnats.NetBSD.org>; Thu, 31 May 2012 23:49:06 +0000 (UTC)
Message-Id: <20120531234906.C84A814A396@mail.netbsd.org>
Date: Thu, 31 May 2012 23:49:06 +0000 (UTC)
From: dholland@NetBSD.org
Reply-To: dholland@NetBSD.org
To: gnats-bugs@gnats.NetBSD.org
Subject: lang/focal uses gets()
X-Send-Pr-Version: 3.95

>Number:         46510
>Category:       pkg
>Synopsis:       lang/focal uses gets()
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    dholland
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu May 31 23:50:04 +0000 2012
>Closed-Date:    Thu May 31 23:58:05 +0000 2012
>Last-Modified:  Thu May 31 23:58:05 +0000 2012
>Originator:     David A. Holland
>Release:        pkgsrc HEAD of 20120531
>Organization:
>Environment:
n/a
>Description:

lang/focal uses gets(), which is inherently insecure.

>How-To-Repeat:

make extract; grep

>Fix:

I already patched it; I'm filing this PR for use as a reference URL in
pkg-vulnerabilities.

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: pkg-manager->dholland
Responsible-Changed-By: dholland@NetBSD.org
Responsible-Changed-When: Thu, 31 May 2012 23:58:05 +0000
Responsible-Changed-Why:
I found and fixed it


State-Changed-From-To: open->closed
State-Changed-By: dholland@NetBSD.org
State-Changed-When: Thu, 31 May 2012 23:58:05 +0000
State-Changed-Why:
fixed.


>Unformatted:

Home	PR Database Search